Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #3111

Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability?

Cross-posted to 3 groups.

Show all headers | View raw

On 10/3/2014 12:53 PM, alexd wrote:
> Caver1 (for it is he) wrote:
> 
>> Ubuntu with bash scripts is used for many embedded appliances and they
>> are vulnerable.
> 
> How many embedded appliances are running Ubuntu, again?

Depends on what one will accept as an "embedded" system;
the SheevaPlug definitely qualifies as embedded.

My Sheevaplug servers are fist-sized and the GuruPlug runs
Debian.  Quick example (noting the short uptime is due to
having had to replace a UPS battery recently) noting that
root is the only login on such servers:

root@lanserv1:~# date
Fri Oct  3 13:14:40 PDT 2014
root@lanserv1:~# uptime
 13:14:42 up 55 days, 22:37,  1 user,  load average: 0.19, 0.15, 0.12
root@lanserv1:~# cat /etc/issue
Ubuntu 9.04 \n \l

root@lanserv1:~# ping thadlabs.com      # 12 miles away in Milpitas CA
PING thadlabs.com (192.220.75.50) 56(84) bytes of data.
64 bytes from thadlabs.com (192.220.75.50): icmp_seq=1 ttl=53 time=15.7 ms
64 bytes from thadlabs.com (192.220.75.50): icmp_seq=2 ttl=53 time=14.3 ms
64 bytes from thadlabs.com (192.220.75.50): icmp_seq=3 ttl=53 time=15.6 ms
64 bytes from thadlabs.com (192.220.75.50): icmp_seq=4 ttl=53 time=16.3 ms

--- thadlabs.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3000ms
rtt min/avg/max/mdev = 14.331/15.527/16.375/0.749 ms
root@lanserv1:~# bash --version
GNU bash, version 3.2.48(1)-release (arm-unknown-linux-gnueabi)
Copyright (C) 2007 Free Software Foundation, Inc.
root@lanserv1:~# uname -a
Linux lanserv1 2.6.22.18 #1 Thu Mar 19 14:46:22 IST 2009 armv5tejl GNU/Linux
root@lanserv1:~#

Note the sizes of the SheevaPlugs and GuruPlug which have been running
here since 2009:

    http://thadlabs.com/PIX/SheevaPlug_first.jpg
    http://thadlabs.com/PIX/SheevaPlug_underside.jpg
    http://thadlabs.com/PIX/SheevaPlug_labelled.jpg
    http://thadlabs.com/PIX/SheevaPlug_Webmin.jpg
    http://thadlabs.com/PIX/SheevaPlug_GuruPlug.jpg
    http://thadlabs.com/PIX/SheevaPlug_CPU_card_top.jpg
    http://thadlabs.com/PIX/SheevaPlug_CPU_card_bottom.jpg

These consume only 4 to 5 Watts power per a Kill-A-Watt device
and they have GiGE ports to serve my LAN (DHCP, DNS, and more)
which is all gigabit:

    http://thadlabs.com/PIX/ThadLABS_network_demarc.jpg
    http://thadlabs.com/FILES/ThadLABS_network_demarc.txt

Thad

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Ger Robertson <something@something.invalid> - 2014-09-26 05:44 +0000
  Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Chris Ahlstrom <OFeem1987@teleworm.us> - 2014-09-26 05:53 -0400
  Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? John Hasler <jhasler@newsguy.com> - 2014-09-26 07:51 -0500
    Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Caver1 <Caver1@inthemud.org> - 2014-09-26 12:26 -0400
      Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Caver1 <Caver1@inthemud.org> - 2014-09-26 12:40 -0400
        Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Java Jive <java@evij.com.invalid> - 2014-09-26 20:00 +0100
          Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Caver1 <Caver1@inthemud.org> - 2014-09-27 18:52 -0400
      Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? alexd <troffasky@hotmail.com> - 2014-10-03 20:53 +0100
        Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Thad Floryan <thad@thadlabs.com> - 2014-10-03 13:33 -0700
          Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? John Hasler <jhasler@newsguy.com> - 2014-10-03 15:51 -0500
            Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Thad Floryan <thad@thadlabs.com> - 2014-10-03 21:01 -0700
  Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Shadow <Sh@dow.br> - 2014-09-26 18:16 -0300
    Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? William Unruh <unruh@invalid.ca> - 2014-09-26 23:18 +0000
      Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Shadow <Sh@dow.br> - 2014-09-26 20:33 -0300
        Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Wildman <best_lay@yahoo.com> - 2014-09-26 19:10 -0500
          Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? William Unruh <unruh@invalid.ca> - 2014-09-27 01:41 +0000
            Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Shadow <Sh@dow.br> - 2014-09-26 23:29 -0300
              Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Michael Black <et472@ncf.ca> - 2014-09-28 20:37 -0400
            Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Wildman <best_lay@yahoo.com> - 2014-09-26 22:10 -0500
              Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Chris Ahlstrom <OFeem1987@teleworm.us> - 2014-09-27 06:42 -0400
              Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Shadow <Sh@dow.br> - 2014-09-27 08:35 -0300
    Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Ger Robertson <something@something.invalid> - 2014-09-27 00:06 +0000
      Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Shadow <Sh@dow.br> - 2014-09-26 23:21 -0300
  Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? William Unruh <unruh@invalid.ca> - 2014-09-26 23:14 +0000
    Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Ant <ant@zimage.comANT> - 2014-09-26 22:47 -0700
    Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? nmassello@yahoo.com (Neill Massello) - 2014-09-27 02:23 -0600

csiph-web